Kernel-RT Security Update: Addressing Vulnerabilities in AlmaLinux Packages
Summary
ALSA-2026:54247: Moderate: kernel-rt security update. Affects kernel-rt versions < 4.18.0-553.155.1.rt7.496.el8_10. Fixed in 4.18.0-553.155.1.rt7.496.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel-rt packages provide the Real Time Linux Kernel, designed for systems that require high determinism and low latency. This kernel variant is crucial for applications in fields such as telecommunications, robotics, and real-time data processing. However, like any software, it is susceptible to vulnerabilities that can compromise system integrity and security.
Vulnerability Detail
The vulnerabilities identified in the kernel-rt packages include a flaw in the UDF (Universal Disk Format) that affects partition descriptor bookkeeping (CVE-2026-45991) and a double-free issue in the ice driver related to the tx_buf skb (CVE-2026-53009). These vulnerabilities could potentially allow an attacker to exploit the system, leading to unauthorized access or system crashes, thereby impacting the reliability of real-time applications.
How To Fix
Minimum fixed version
4.18.0-553.155.1.rt7.496.el8_10
This is the first release that contains the fix.
sudo dnf update kernel-rtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling the affected features of the kernel-rt packages until the update can be applied. However, this may not be feasible for all users, especially those relying on real-time capabilities.
Conclusion
The kernel-rt security update addresses critical vulnerabilities that could impact system stability and security. Users are urged to update their packages promptly to the latest version to safeguard their systems against potential exploits. Utilizing tools like Vulert can further enhance security monitoring.
See every vulnerability recorded for kernel-rt →
FAQ
The vulnerabilities include a bookkeeping issue in UDF and a double-free error in the ice driver, which could lead to system instability or unauthorized access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
It is recommended to update the kernel-rt packages to the latest patched version as soon as possible to mitigate the risks associated with these vulnerabilities.
While specific exploits may not be publicly disclosed, the nature of the vulnerabilities suggests that they could be leveraged by attackers to compromise system security.
Vulert is a tool that monitors and alerts for open-source vulnerabilities using a manifest file like package-lock.json. It helps ensure your software remains secure without requiring direct access to the code.
Related vulnerabilities
Recent vulnerabilities recorded for kernel-rt.
